touch_updater: add getpid and prlimit to seccomp
This is needed to make sure seccomp work with glibc 2.27
BUG=chromium:897477
TEST=None
Change-Id: Ib05208b814f58d72fb9af5ee8390c999ca284a22
Reviewed-on: https://chromium-review.googlesource.com/1294369
Commit-Ready: Yunlian Jiang <yunlian@chromium.org>
Tested-by: Yunlian Jiang <yunlian@chromium.org>
Reviewed-by: Mike Frysinger <vapier@chromium.org>
diff --git a/policies/amd64/rmi4update.query.policy b/policies/amd64/rmi4update.query.policy
index 46cec0b..07a730b 100644
--- a/policies/amd64/rmi4update.query.policy
+++ b/policies/amd64/rmi4update.query.policy
@@ -33,3 +33,4 @@
rt_sigprocmask: 1
getrlimit: 1
getpid: 1
+prlimit64: arg2 == 0 && arg3 != 0
diff --git a/policies/amd64/rmi4update.update.policy b/policies/amd64/rmi4update.update.policy
index 4bc837c..6156eeb 100644
--- a/policies/amd64/rmi4update.update.policy
+++ b/policies/amd64/rmi4update.update.policy
@@ -41,3 +41,4 @@
rt_sigprocmask: 1
getrlimit: 1
getpid: 1
+prlimit64: arg2 == 0 && arg3 != 0
diff --git a/policies/amd64/sisupdate.query.policy b/policies/amd64/sisupdate.query.policy
index 019b480..04ba438 100644
--- a/policies/amd64/sisupdate.query.policy
+++ b/policies/amd64/sisupdate.query.policy
@@ -31,3 +31,4 @@
execve: 1
futex: 1
getpid: 1
+prlimit64: arg2 == 0 && arg3 != 0
diff --git a/policies/amd64/sisupdate.update.policy b/policies/amd64/sisupdate.update.policy
index 24f7df4..c8f49d8 100644
--- a/policies/amd64/sisupdate.update.policy
+++ b/policies/amd64/sisupdate.update.policy
@@ -35,3 +35,4 @@
time: 1
futex: 1
getpid: 1
+prlimit64: arg2 == 0 && arg3 != 0
diff --git a/policies/amd64/wdt_util.query.policy b/policies/amd64/wdt_util.query.policy
index f6aceac..13f3b78 100644
--- a/policies/amd64/wdt_util.query.policy
+++ b/policies/amd64/wdt_util.query.policy
@@ -32,3 +32,4 @@
exit_group: 1
getpid: 1
+prlimit64: arg2 == 0 && arg3 != 0
diff --git a/policies/amd64/wdt_util.update.policy b/policies/amd64/wdt_util.update.policy
index 2c28db5..73d0ae4 100644
--- a/policies/amd64/wdt_util.update.policy
+++ b/policies/amd64/wdt_util.update.policy
@@ -33,3 +33,4 @@
exit_group: 1
getpid: 1
+prlimit64: arg2 == 0 && arg3 != 0
